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POSSIBLE INDICES FOR THE GALOIS IMAGE OF ELLIPTIC CURVES 

OVER Q 

DAVID ZYWINA 


Abstract. For a non-CM elliptic curve E/Q, the Galois action on its torsion points can be ex¬ 
pressed in terms of a Galois representation pE’- Galjj := Gal(Q/Q) —>■ GL 2 (Z). A well-known 
theorem of Serre says that the image of pe is open and hence has finite index in GL 2 (Z). We 
will study what indices are possible assuming that we are willing to exclude a finite number of 
possible j-invariants from consideration. For example, we will show that there is a finite set J of 
rational numbers such that if i?/Q is a non-GM elliptic curve with j-invariant not in J and with 
surjective mod I representations for all £ > 37 (which conjecturally always holds), then the index 
[GL 2 (Z) : p_B(GalQ)] lies in the set 

f 2, 4, 6,8,10,12,16, 20, 24, 30, 32, 36, 40, 48, 54, 60, 72, 84, 96,108,112,120,144, 1 
^ \ 192, 220, 240, 288, 336, 360, 384, 504, 576, 768, 864,1152,1200,1296,1536 J ’ 

Moreover, X is the minimal set with this property. 


1. Introduction 

1.1. Main results. Let E be an elliptic curve defined over Q. For each integer A > 1, let E[N] 
be the A-torsion subgroup of E(Q). The group E[A] is a free Z/AZ-module of rank 2 and has 
natural action of the absolute Galois group GuIq := Gal(Q/Q). This Galois action on E[A] may 
be expressed in terms of a Galois representation 

Pe,n- GalQ ^ Aut(E[A]) ^ GL 2 (Z/AZ); 

it is uniquely determined up to conjugacy by an element of GL 2 (Z/AZ). By choosing bases com¬ 
patibly for all A, we may combine the representations pe,n to obtain a single Galois representation 

Pe'- GrIq —> GL2(Zi) 

that describes the Galois action on all the torsion points of E, where Z is the profinite completion 
of Z. If E is non-CM, then the following theorem of Serre [Ser72] says that the image is, up to finite 
index, as large as possible. 

Theorem 1.1 (Serre). If E/Q is a non-CM elliptic curve, then /3£;(Gal(Q) has finite index in 
GL2(Z). 

Serre’s theorem is qualitative, and it natural to ask what the possible values for the index 
[GL 2 (Z) : /3E(GalQ)] are. Our theorems address this question assuming that we are willing to 
exclude a finite number of exceptional j-invariants from consideration; we will see later that the 
index [GL 2 (Z) : / 0 £;(GalQ)] depends only on the j-invariant Je of E. 

The hardest part of Serre’s proof of Theorem 1.1 is to show that there is an integer ce such that 
7'E,f(GalQ) = GL 2 (Z/£Z) for all £ > ce- In [Ser72, §4.3], Serre asks whether one can choose ce 
independent of the elliptic curve (moreover, he asked whether this conjecture holds with c = 37 
[SerSl, p. 399]). We formulate this as a conjecture. 
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Conjecture 1.2. There is an absolute constant c such that for every non-CM elliptic curve E over 
Q, we have /9£:^£(GalQ) = GL 2 (Z/^Z) for all i > c. 

Define the set 

_ f 2,4,6,8,10,12,16, 20,24, 30, 32,36,40,48,54, 60, 72,84, 96,108,112,120,144, ) 

■“ \ 192, 220, 240,288, 336,360,384, 504, 576, 768, 864,1152,1200,1296,1536 / ' 

Theorem 1.3. Fix an integer c. There is a finite set J, depending only on c, such that if E/Q is 
an elliptic curve with Je ^ J and pE/ surjective for all primes i > c, then [GL 2 (Z) : ^^(GalQ)] is 
an element ofX. 

Assuming Conjecture 1.2, we can describe all possible indices [GL 2 (Z) : ^^(GalQ)] after first 
excluding elliptic curves with a finite number of exceptional j-invariants. 

Theorem 1.4. Conjecture 1.2 holds if and only if there exists a finite set J C Q such that 

[GL2(Z) :pE(GalQ)] gX 

for every elliptic curve E over Q with jE 0 J ■ 

For each integer n > 1, let be the set of j G Q that occur as the j-invariant of some elliptic 
curve E over Q with [GL 2 (Z) : /?£;(GalQ)] = n. The following theorem shows that in Theorems 1.3 
and 1.4, we cannot replace X by a smaller set. 

Theorem 1.5. The set of integers n > 1 for which is infinite is X. 

Remark 1.6. 

(i) Assuming Conjecture 1.2, Theorem 1.4 and Serre’s theorem implies that there is an absolute 
constant C such that [GL 2 (Z) : / 0 £;(GalQ)] < C for all non-CM elliptic curves E over Q. 

(ii) The set J in Theorem 1.4 contains more than the thirteen j-invariants coming from those 
elliptic curves over Q with complex multiplication. For example, the set J contains —7 • 11^ 
and —7 • 137^ • 2083^ which arise from the two non-cuspidal rational points of Xo(37), see 
[Vel74]. If X/Q is an elliptic curve with j-invariant —7 • 11^ or —7 • 137^ • 2083^, then one 
can show that [GL 2 (Z) : yOE(GalQ)] > 2736. 

(iii) In our proofs of Theorems 1.3 and 1.4, the finite set J is ineffective; we apply Faltings’ 
theorem (which is ineffective) to a finite number of modular curves. 

1.2. Overview. In §2, we show that the index of /^^(GalQ) in GL 2 (Z) depends only on its commuta¬ 
tor subgroup. In §3, we give some background on modular curves; for a fixed group G of GL 2 (Z/A^Z) 
containing —I, their rational points will describe the elliptic curves X/Q with jA ^ {0,1728} for 
which /3£;,Ar(GalQ) is conjugate to a subgroup of G. 

In §4, we prove a version of Theorem 1.3 with X replaced by another set ^ is defined in terms 
of the congruence subgroups of SL 2 (Z) with genus 0 or 1. We use Faltings’ theorem to deal with 
rational points of several modular curves with genus at least 2. 

In §5, we describe how to compute the set we find that it agrees with our set X. Here, and 
throughout the paper, we avoid computing models for modular curves. For a genus 0 modular 
curve, we use the Hasse principle to determine whether it is isomorphic to Pq. We compute the 
Jacobian of genus 1 modular curves, up to isogeny, by counting their Fp-points via the moduli 
interpretation. We also make use of the classihcation of genus 0 and 1 congruence subgroups due 
to Cummin and Pauli. 

Finally, in §6 we complete the proofs of Theorems 1.3, 1.4 and 1.5. 
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1.3. Notation. Fix a positive integer m. Let be the ring that is the inverse limit of the rings 
Z/m®Z with respect to the reduction maps; equivalently, the inverse limit of Z/NZ, where N divides 
some power of m. We will make frequent use of the identifications Z^ = andZ = n,Z£, 

where t denotes a prime. In particular, Z^ depends only on the primes dividing m. 

For a subgroup G of GL 2 (Z/mZ), GL 2 (Zm) or GL 2 (Z) and an integer N dividing m, we denote 
by G{N) the image of the group G in GL 2 (Z/NZ) under reduction modulo N. 

All profinite groups will be considered with their profinite topologies. The commutator subgroup 
of a profinite group G is the closed subgroup G' generated by its commutators. 

For each prime p, let Up: —» Z be the p-adic valuation. 

Acknowledgments. Thanks to Andrew Sutherland and David Zureick-Brown. 

The computations in §5 were performed using the Magma computer algebra system [BCP97]; code 
can be found at 

http://WWW.math.Cornell.edu/~zywina/papers/PossibleIndices/ 

We have made use of some of the Magma code from [Sutl5]. 

2. The commutator subgroup of the image of Galois 

Let FI be a non-GM elliptic curve defined over Q. Using the Weil pairing on the groups E[N], 
one can show that the homomorphism detop^:: GalQ —)■ Z^ is equal to the cyclotomic character 
y. Recall that y: GalQ —>■ Z^ satisfies (t(C) = modn n > 1, n-th root of unity 

C G Q and a G GrIq. 

We first show that index of p^(GalQ) in GL 2 (Z) is determined by its commutator subgroup. 
Proposition 2.1. We have [GL 2 (Z) : pE(GalQ)] = [SL 2 (Z): pE(GalQ)']. 

Proof. The character x is surjective, so det(pE(GalQ)) = Z’^ and hence pE(GalQ) n SL 2 (Z) = 
PE(GalQcyc), where is the cyclotomic extension of Q. We thus have 

[GL 2 (Z) : PE(GalQ)] = [SL 2 (Z) : pE(GalQ) n SL 2 (Z)] = [SL 2 (Z): pE(GalQcyc)]. 

It thus suffices to show that p£;(GalQcyc) equals p£;(GalQab) = pE(GalQ)', where C Q is the 
maximal abelian extension of Q. This follows from the Kronecker-Weber theorem which says that 

Qcyc ^ Qab_ □ 

Remark 2.2. 

(i) One can show that there are infinitely many different groups of the form p^(GalQ) as E 
varies over non-CM elliptic curves over Q; moreover, there are infinitely many such groups 
with index 2 in GL 2 (Z). One consequence of Proposition 2.1 is that to compute the index 
[GL 2 (Z) : p^(GalQ)] one does not need to know the full group p£:(GalQ), only p^(GalQ)'. 

Gonjecturally, there are only a finite number of subgroups of SL 2 (Z) of the form pE(GalQ)' 
with a non-CM E/Q. Indeed, suppose that Conjecture 1.2 holds. Remark 1.6(i) and 
Proposition 2.1 implies that the index of [SL 2 (Z) : peCGuIq)'] is uniformly bounded for 
non-CM E/Q. The finite number of possible groups of the form p£;(GalQ)' follows from 
their only being finitely many open subgroup of SL 2 (Z) of a given index. 

(ii) For a non-CM elliptic curve E over a number field K, a similar argument shows that 

[GL2(Z) : pEiGalK)] < [Z^ : x(Gali^)] • [SL2(Z): ^^(Gali^)']. 

The inequality may be strict ii K ^ Q. 
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The following corollary show that for an elliptic curve E/Q, the index of /OE(GalQ) in GL 2 (Z) 
depends only on the Q-isomorphism class of E. In particular, the j-invariant is the correct notion 
to use in Theorems 1.4 and 1.5. 

Corollary 2.3. For an elliptic curve E over Q, the index [GL 2 (Z) : /9£;(GalQ)] depends only on 
the j-invariant of E. 

Proof. Suppose that Ei and E 2 are elliptic curves over Q with the same j-invariant (and hence 
isomorphic over Q). If Ei (and hence E 2 ) has complex multiplication, then both indices are infinite. 
We may thus assume that Ei and E 2 are non-GM. Since they have the same j-invariant, Ei and E 2 
are isomorphic over a quadratic extension L of Q. Fixing such an isomorphism, we can identify the 
representations PEilcaiL PE2 \ GaiL - We have L C by the Kronecker-Weber theorem, so the 
groups /9Ei(GalQab) = /9Ei(Gal(Q)' and /9E2(GalQab) = /?£; 2 (GalQ)' are equal under this identification. 
The corollary then follows immediately from Proposition 2.1. □ 

3. Modular curves 

Fix a positive integer N and a subgroup G of GL 2 (Z/A^Z) containing —I that satisfies det(G) = 
(fLjNTdf^. Denote by Yq and Xg, the Z[l/X]-schemes that are the coarse space of the algebraic 
stacks J#g[l/X] and respectively, from [DR73, IV §3]. We refer to [DR73, IV] for further 

details. 

The Z[l/V]-scheme Xq is smooth and proper and Ig is an open subscheme of Xq. The comple¬ 
ment of Yq in Xg, which we denote by X“, is a finite etale scheme over Z[l/X], see [DR73, IV §5.2]. 
The fibers of Xq are geometrically irreducible, see [DR73, IV Corollaire 5.6]; this uses our assump¬ 
tion that det(G) = (Z/XZ)^. 

In later sections, we will mostly work with the generic fiber of Xg, which we will also denote 
by Xg, which is a smooth, projective and geometrically irreducible curve over Q (similarly, we will 
work with the generic hber of Yq which will be a non-empty open subvariety of Xg). 

Fix a field k whose characteristic does not divide X; for simplicity, we will also assume that k is 
perfect. Ghoose an algebraic closure k of k and set Gal^ := Gal{k/k). 

In §3.1, we use the moduli property of ..#^[1/X] to give a description of the sets Vg(^) and 
Yc{k). In §3.2, we describe the natural morphism from Yq to the j-line. In §3.3, we give a way to 
compute the cardinality of the finite set X^{k) of cusps of Xq that are defined over k. In §3.4, we 
explain when the set Vg(I^) is non-empty. In §3.5, we will observe that hG(C) as a Riemann surface 
is isomorphic to the quotient of the upper-half plane by the congruence subgroup Fg consisting 
of X E SL 2 (Z) for which A modulo X lies G. Finally in §3.6, we explain how to compute the 
cardinality of Xg(IF'p) for primes p f 6X. 

3.1. Points of Ig. For an elliptic curve E over k, let E[N] be the X-torsion subgroup of E{k). A 
G-level structure for E is an equivalence class [a!]G of group isomorphisms a: E[N] —> ifL/N'L)'^, 
where we say that a and a' are equivalent if a = o a' for some g & G. We say that two pairs 
{E, [a]G) and (X', [o!']g)! both consisting of an elliptic curve over k and a G-level structure, are 
isomorphic if there is an isomorphism X —)• X' of elliptic curves such that [a]G = [of o '^]g 

equivalent, where we also denote by cf the isomorphism X[X] —)• X'[X], P 1 — 4>{P). 

From [DR73, IV Definition 3.2], .y^Q[l/N]{k) is the category with objects (X, [a]G )5 i-O-, elliptic 
curves over k with a G-level structure, and morphisms being the isomorphisms between such pairs. 
Since Tg is the coarse space of ./#^[1/X], we find that YQ{k) is the set of isomorphisms classes in 
Jf°a[l/N]{k). 
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The functoriality of ^q[1/N], gives an action of the group Galfc on Ycik). Take any a G Galfe. 
Let be the base extension of E/k by the morphism Specfc —)• Specfc coming from a. The 
natural morphism E^ E oi schemes induces a group isomorphism E^[N] —>• E[N] which, by 
abuse of notation, we will denote by a~^. More explicitly, if E is given by a Weierstrass equa¬ 
tion y'^ + aixy + asu = + 04 ® + with a* G k, we may take E^ to be the curve defined 

by + o'{ai)xy + (j{a'i)y = + cj(a 4 )x + cr(a 6 ); the isomorphism E^[N] —>■ -E[A^] is then given 

by (x,y) !-)• (cj“^(x), cr“^(y)). For a point P G YQ{k) represented by a pair {E,[a]G), the point 
(7{P) G Ycik) is represented by {E^, \a o a~^]G)- 

Since k is perfect, YG{k) is the subset of Ydk) stable under the action of Galfc. The follows 
lemma describes Ycik). For an elliptic curve E over k, let E[N] be the A^-torsion subgroup of 
Eik). Each a G Gal^ gives an isomorphism E[N] —> E[N], P 1 —)• a~^{P) that we will also denote 
bycT-b 

Lemma 3.1. 

(i) Each point P G Y^k) is represented by a pair (E, [q;]g) with E defined over k. 

(ii) Let P G Ydk) be a point represented by a pair {E, [ajc) with E defined over k. Then P is 

an element ofYc^k) if and only if for all a G Gal^, we have an equality 

a o = g o a o (j) 

of isomorphisms E[A^] ^ (fLjNTL)^ for some ( j ) G Aut(£'^) and g € G. 

Proof. First suppose that {E, [ajc) represents a point P G Ycik). To prove (i) it suffices to show 

that E is isomorphic over k to an elliptic curve defined over k. So we need only show that Je is 

an element of k. For any a G Galfc, the point P = (t{P) is also represented by {E^, [a o a~^\G). 
This implies that E and E^ are isomorphic and hence = Je- We thus have Je G k since k is 

perfect. 

We now prove (ii). Let P G Ycik) be a point represented by a pair (E, [ajc) with E defined 
over k. Take any a G Galfc. The point cr(P) is represented by {E, [a o we can make the 

identification E = E^ since E is defined over k. We have cr{P) = P if and only if there is an 
automorphism (j) G Aut(P^) such that [a o cj“^]g = [a o Since k is perfect, we have P G YG{k) 
if and only if for all a G Galfc, we have [a o a~^]G = [a o cfi^G for some (p G Aut(P^); this is a 
reformulation of part (ii). □ 

3.2. Morphism to the j-line. If G = GL 2 (Z/A^Z), then there is only a single G-level structure 
for each elliptic curve. There is an isomorphism Fql 2 (z/ 7 VZ) = ■^z[i/w]’ ^-points, it takes a 

point represented by a pair (P, [oJg) to the j-invariant je G k. If G' is a subgroup of GL 2 (Z/A^Z) 
containing G, then there is a natural morphism Yg —>• Yg'- In particular, G' = GL 2 (Z/A^Z) gives 
a morphism 

eg- Yg ^ ^i.[i/N] 

that maps a fc-point represented by a pair (P, [oJg) to the j-invariant of E. 

Fix an elliptic curve E over k. By choosing a basis for E[N] as a Z/A^Z-module, the Galois 
action on E[N] can be expressed in terms of a representation pe,n- Galfc —S' GL 2 (Z/A^Z); this is 
the same as the earlier definition with k = Q. The representation pe,n is uniquely determined up 
to conjugation by an element of GL 2 (Z/A^Z). 

Proposition 3.2. Let E be an elliptie curve over k with Je ^ {0,1728}. The group pE,N{Galk) is 
eonjugate in GL 2 (Z/A^Z) to a subgroup of G if and only if je is an element of TTG{YG{k)). 
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Proof. First suppose that pE,N{Galk) is conjugate to a subgroup of G. There is thus an isomorphism 
a: E[N] ^ (Z/A^Z)^ such that aoaoa~^ G G for all o G Gal^. By Lemma 3.1(ii), with </>=!, the 
pair {E, [ajc) represents a point P G Ycik). Therefore, je = T^ciP) is an element of -KciYcik)). 

Now suppose that je = T^ciP) for some point P G Yc{k). Lemma 3.1 implies that P is rep¬ 
resented by a pair {E, [q;]g)) where for all a G Galfc, we have a o o cf o a~^ G G for some 
automorphism (j) of E^. The assumption je ^ {0,1728} implies that Aut(Fi^) = {±1}. In par¬ 
ticular, every automorphism of E^ acts on E[N] as ±7. Since G contains —I, we deduce that 
a o a~^ o a~^ G G for all a G Gal^. We may choose pe,n so that pe,n{o') = a o a o a~^ for all 
a G Galfc, and hence p_B,Ar(Galfc) is a subgroup of G. □ 

Take any j € k and fix an elliptic curve E over k with Je = j- Let M be the group of 
isomorphisms —)• (Z/AiZ)^. Gomposition gives an action of the groups G and Aut(7i^) on 

M; they are left and right actions, respectively. The map a £ M {E, [ajc) induces a bijection 

(3.1) G\M/ AutiEj^) ^ (P G Ycik) : TrciP) = j}. 

The group Galfc acts on M by the map Galfc xM —)■ M, (u, a) ^ ao a~^. From the description of 
the Galois action in §3.1, we find that the bijection (3.1) respects the Gal^-actions. The following 
lemma is now immediate (again we are using that k is perfect). 

Lemma 3.3. The set {P G Y^k) : ttg{P) = j} has the same cardinality as the subset of 
G\M/ Aut(P^) fixed by the Galfc-action. 

3.3. Cusps. In this section, we state an analogue of Lemma 3.3 for XQ^k). Let M be the group 
of isomorphisms pN x Z/A^Z —)• (Z/A^Z)^, where pN is the group of A^-th roots of unity in k. The 
group Galfc acts on M by the map Gal^ xM —)■ M, (cr, a) >->■ aocr”^, where acts on p^ as usual 
and trivially on Z/A^Z. Let U be the subgroup of Aut{pN x TL/NTL) given by the matrices ± (q “) 
with u G Hom(Z/77Z, /.iTv). Gomposition gives an action of the groups G and U on M; they are 
left and right actions, respectively. Gonstruction 5.3 of [DR73, VI] shows that there is a bijection 

X^{k) ^ G\M/U 

that respects the actions of Gal^. We thus have a bijection between X^{k) and the subset of 
G\M/U fixed by the action of Gal^. 

Observe that the cardinality of X^^k) depends only on G and the image of the character 
Xn- Galfc —>• (Z/VZ)^ describing the Galois action on p^, i.e., a{C) = for all a G Galfc and 

all C £ Pn- Let B be the subgroup of GL 2 (Z/VZ) consisting of matrices of the form (q 5) with 
b G XAr(GalA:). Let U be the subgroup of GL 2 (Z/VZ) generated by —7 and (J }). The group B 
normalizes U and hence right multiplication gives a well-defined action of B on G\ jlJ. 

The following lemma is now immediate. 

Lemma 3.4. The set XQ{k) has the same cardinality as the subset o/G\ GL2(Z/VZ)/?7 fixed by 
right multiplication by B. 

3.4. Real points. The following proposition tells us when Tg'(I^) is non-empty. 

Proposition 3.5. The set ^(^(IR) is non-empty if and only if G contains an element that is conju¬ 
gate in GL2(Z/VZ) to [q fji) or (Q ). 

Proof. Let E be any elliptic curve over M. As a topological group, the identity component of E{R) 
is isomorphic to M/Z. So there is a point Pi G E(R) of order N. Choose a second point P 2 G P(C) 
so that {Pi, P 2 } is a basis of E[N] as a Z/VZ-module. Define pe,n with respect to this basis. 

Let a G Aut(C/M) be the complex conjugation automorphism. We have o'(Pi) = Pi and (7(P2) = 
bPi -\- dP 2 for some b,d £ TLfNTL^ i.e., pe,n{'^) ■= (0 d) ^ GL 2 (Z/VZ). Using the Weil pairing, we 
find that det{pE,N{o')) describes how a acts on the V-th roots of unity. Since complex conjugation 
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inverts roots of unity, we have det{pE,N{o')) = —1 and hence d = —1. For a fixed m G 
define points P[ '■= Pi and P 2 := P 2 + mPi. The points P 2 } ^ basis for -E[A^], and we have 

cr{P{) = P{ and 

o'(^ 2 ) = (bPi - P 2 ) + mPi = -{P 2 + mPi) + {b + 2m)Pi = -P 2 + (6 + 2m)P{. 

We can choose m so that b + 2m is congruent to 0 or 1 modulo N ; with such an m and the choice 
of basis {^{,^ 2 }) the matrix pe,n{o') will be ( 0 - 1 ) or (g Ji)- 

We claim that both of the matrices ( 0 - 1 ) and (0 Ji) are conjugate to pe,n{o') for some E/M. 
with Je ^ {0,1728}. This is clear if N is odd since the two matrices are then conjugate (we 
could have solved for m in either of the congruences above). If N is even, then it suffices to show 
that both possibilities occur when N = 2; this is easy (if E/Q is given by a Weierstrass equation 
-\-ax + b, the two possibilities are distinguished by the number of real roots that + ax+ b 

has). 

Using Proposition 3.2, we deduce that 7rG(lG'(I^)) ~ {0,1728} is non-empty if and only if G 
contains an element that is conjugate in GL 2 (Z/A^Z) to (0 .Pi) or (g J^). To complete the proof 
of the proposition, we need to show that if 7rG'(yG'(I^)) P {0,1728}, then 7rG(lG(IR)) is empty. So 
suppose that 7rG'(TG(M)) C {0,1728} and hence Tg(M) is finite. However, since Yq over Q is a 
smooth, geometrically irreducible curve, the set Tg(M) is either empty or inhnite. □ 

3.5. Complex points. The complex points Tg(C) form a Riemann surface. In this section, we 
describe it as a familiar quotient of the upper half plane by a congruence subgroup. 

Let Sj be the complex upper half plane. For z G Sj and 7 = (“^) G SL 2 (Z), set 7(2:) := 

{az + b)/{cz + d). We let SL 2 (Z) act on the right of by x SL 2 (Z) (2,7) e-;' Y(z), where 

7* is the transpose of 7. For a congruence subgroup F, the quotient i^/F is a smooth Riemann 
surface. 

We define the genus of a congruence subgroup F to be the genus of the Riemann surface i^/F. 

Remark 3.6. One could also consider the quotient r\i 3 of S 3 under the left action given by (7, z) e-)- 
7(2); it is isomorphic to the Riemann surface S 3 /T (use that 7* = for all 7 G F, where 

R = (5 ) ). In particular, the genus of F\ij agrees with the genus of F. 

Let Fg be the congruence subgroup consisting of matrices 7 G SL 2 (Z) whose image modulo N lies 
in G. The image of Fg modulo N is GnSL 2 (Z/A^Z) since the reduction map SL 2 (Z) —)• SL 2 (Z/A^Z) 
is surjective. In particular, Fg depends only on the group Gn SL 2 (Z/A^Z) and we have 

[SL2(Z) : Fg] = [SL2(Z/A1Z) : G n SL2(Z/iVZ)]. 

Proposition 3.7. The Riemann surfaces Yg{C) and S^/Tq are isomorphic. In particular, the 
genus of Yq is equal to the genus 0/ Fg . 

Proof. Set := C — R; we let GL 2 (Z) act on the right in the same manner SL 2 (Z) acts on Sj. We 
also let GL 2 (Z) act on the right of G\GL 2 (Z/A^Z) by right multiplication. From [DR73, IV §5.3], 
we have an isomorphism 

Vg(C) = (V± X (G\GL2(Z/iVZ)))/GL2(Z). 

Using that det(G) = (Z/VZ)^ and setting H := G Ci SL 2 (Z/VZ), we find that the natural maps 
(io X (G\GL 2 (Z/A^Z)))/SL 2 (Z) ^ {X^ X (G\GL 2 (Z/iVZ)))/GL 2 (Z) and 
{S 3 X (R\SL2(Z/A^Z)))/SL2(Z) ^{S 3 X (G\GL2(Z/iVZ)))/SL2(Z) 

are isomorphisms of Riemann surfaces. It thus suffices to show that S 3 /TG and {S 3 x{H\ SL 2 (Z/VZ)))/ SL 2 (Z) 
are isomorphic. Dehne the map 

ip: ij/FG ^ (ij X (R\SL2(Z/iVZ)))/SL2(Z) 
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that takes a class containing to the class represented by {z,H ■ I). For 7 G SL 2 (Z), the pairs 
{z,H ■ I) and {'y*'{z),H ■ 7“^) lies in the same class of (i^ x (Ff\SL 2 (Z/A^Z)))/SL 2 (Z); from this 
one readily deduced that (p is well-dehned and injective. It is straightforward to check that (p is an 
isomorphism of Riemann surfaces. □ 

3.6. Fp-points. Fix a prime p f 6A^ and an algebraic closure Fp of Fp. The Galois group Gal(Fp/Fp) 
is topologically generated by the automorphism Frobp: x ^ . In this section, we will describe 

how to compute |XG'(Fp)|. 

For an imaginary quadratic order O of discriminant D, the j-invariant of the complex elliptic 
curve C/O is an algebraic integer; its minimal polynomial Pd{x) G Z[x] is the Hilbert class poly¬ 
nomial of O. For an integer D < 0 which is not the discriminant of a quadratic order, we set 
Pd{x) = 1 . 

Fix an elliptic curve E over Fp with Je ^ {0,1728}. Let qe be the integer p + 1 — |Fi(Fp)|. Set 
'■= — 4p; we have / 0 by the Hasse inequality. Let bE be the largest integer 6 > 1 such 

that and = 0; this is well-defined since we will always have PaeUe) = 0. Dehne 

th.G 

^ _ f {aE -‘^ElbE)l‘2. A^/be • (1 - A£;/6|;)/4\ 

^ \ ^E (flE + ^e/^e)/ 2 y’ 

it has integer entries since AE/b^ integer congruent to 0 or 1 modulo 4 (it is the discriminant 
of a quadratic order) and Ae = cie (mod 2). One can check that ^e has trace aE and determinant 
p. In practice, is straightforward to compute; there are many good algorithms to compute qe 
and Pd{x). 

The follow proposition shows that ^e describes (Frobp), and hence also pe,n-, up to conju- 
gacy. 

Proposition 3.8. With notation as above, the reduction of^E modulo N is conjugate in GL 2 (Z/AZ) 
to PE, AT (Frobp). 

Proof. It suffices to prove the lemma when A is a prime power. For N a prime power, it is then a 
consequence of Theorem 2 in [Genl5]. □ 

We now explain how to compute |Ag(Fp)|. We can compute |A“(Fp)| using Lemma 3.4 (with 
k = Fp, the subgroup 7;Ar(GalFp) of (Z/AZ)^ is generated by p modulo A). So we need only 
describe how to compute |yG'(Fp)|; it thus suffices to compute each term in the sum 

|yG(lFp)| = E e ^G(Fp) : vrG(P) = j}|. 

jGFp 

Take any j G Fp and fix an elliptic curve E over Fp with Je = j- 

First suppose that j ^ {0,1728}. We have Aut(A^) = {±7} and hence each automorphism acts 
on E[N] by I or —Let M be the group of isomorphisms E[N] —> (Z/AZ)^. Since —I G G, we 
have G\M / Aut(£'ip ) = G\M. Lemma 3.3 implies that |{P G YcfFp) : TTciP) = y}| is equal to 
cardinality of the subset of G\M fixed by the action of Frobp. By Proposition 3.8 and choosing an 
appropriate basis of E[N], we deduce that IIP G Fg'(Fp) : EciP) = y}| is equal to the cardinality 
of the subset of G\GL 2 (Z/AZ) fixed by right multiplication by 4 >e- In particular, note that we 
can compute |{P G Fg'(Fp) ^ '^g(F’) = y}| without having to compute A [A]. 

Now suppose that j G {0,1728} and recall that p } 6. When j = 0, we take E/¥p to be the curve 
dehned by = x^ — 1; the group Aut(Pip ) is cyclic of order 6 and generated by (x, y) (Cx, —y), 


where C £ Fp is a cube root of unity. When j = 1728, we take E/¥p to be the curve defined by 
y2 _ x3 _ group Aut(£j:^) is cyclic of order 6 and generated by {x,y) (—x,Cy), where 

C S Fp is a fourth root of unity. 

One can compute an explicit basis of With respect to this basis, the action of Aut(Sip ) 

on E[N] corresponds to a subgroup A of GL 2 (Z/A^Z) and the action of Frobp on E[N] corresponds 
to a matrix ^e,n G GL 2 (Z/A^Z). Lemma 3.3 implies that |{P € Y'g(Fp) : 7rc{P) = j}\ equals the 
number of elements in G\ GL 2 (Z/A^Z)/A that are fixed by right multiplication by ^ e , n - 

4 . Preliminary work 

Take any congruence subgroup P of SL 2 (Z) and denote its level by Nq. Let ±r be the congruence 
subgroup generated by L and —I. Let N be the integer Nq, ANq or 2Nq when V 2 {Nq) is 0, 1 or at 
least 2, respectively. 

Definition 4.1. We define ^/’(r) to be the set of integers 

[SL 2 (ZAr) :G']-2/gcd(2,iV), 

where G varies over the open subgroups of GL 2 (ZAr) that are the inverse image by the reduction 
map GL 2 (Z 7 v) ^ GL 2 (Z/A^Z) of a subgroup G{N) C GL 2 (Z/A^Z) which satisfies the following 
conditions: 

(a) G{N) n SL 2 (Z/A^Z) is equal to ±r modulo N, 

(b) gIn) D (Z/iVZ)^ - I, 

(c) det(G(lV)) = (ZINZ)^, 

(d) G{N) contains a matrix that is conjugate to (o -i) (o -i) ™ GL 2 (Z/A^Z), 

(e) the set Xq(^e[){Q) is infinite. 

The set is finite since there are only finitely many possible G{N) for a fixed N. In the 

special case = 1, we view GL 2 (Zjv) and SL 2 (ZAr) as trivial groups and hence we find that 
c/^(SL 2 (Z)) = {2}. Define the set of integers 

r 

where the union is over the congruence subgroups of SL 2 (Z) that have genus 0 or 1. The set ^ is 
finite since there are only finitely many congruence subgroups of genus 0 or 1, see [GP03]. 

The goal of this section is to prove the following theorem. 

Theorem 4.2. Fix an integer c. There is a finite set J, depending only on c, such that if E/Q is 
an elliptic curve with Je ^ J and pE/ surjective for all primes i > c, then [GL 2 (Z) : /9£;(GalQ)] is 
an element of ^. 

In §5, we will compute ^ and show that it is equal to the set X from §1; this will prove 
Theorem 1.3. 

4.1. The congruence subgroup P e - Pix a non-GM elliptic curve E over Q. Define the subgroup 

G:=Z^ •pE(GalQ) 

of GL 2 (Z). Por each positive integer n, let be the image of G under the projection map 
GL2(Z) ^GL2(Z„). 

By Serre’s theorem, G is an open subgroup of GL 2 (Z). We have an equality G' = /3£;(GalQ)' of 
commutator subgroups and hence 

(4.1) [GL2(Z) : pi5(GalQ)] = [SL2(Z) : G'] 
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by Proposition 2.1. There is no harm in working with the larger group G since we are only con¬ 
cerned about the index [GL 2 (Z) : /?E(GalQ)]. 

Let m be the product of the primes i for which i < 5 or for which is not surjective. The 
group Gm n SL 2 (Zm) is open in SL 2 (Zm). Let Nq > 1 he the smallest positive integer dividing 
some power of m for which 

(4.2) GmnSL 2 {Zm)^{AGSL 2 iZm)-A = I (modiVo)}. 

Let N be the integer Nq, ANq or 2Nq when V 2 {Nq) is 0, 1 or at least 2, respectively. 

Define Tg := Tc^tv)! d is the congruence subgroup consisting of matrices 7 € SL 2 (Z) whose 
image modulo N lies in G{N). Note that the congruence subgroup Tg has level Nq and contains 
-I. 

Proposition 4.3. The subgroup G{N) o/GL 2 (Z/A^Z) satisfies conditions (a), (b), (c) and (d) of 
Definition fil with T = Tg. 

Proof. Our congruence subgroup T e contains —I and was chosen so that T e modulo N equals 
G{N) n SL 2 (Z/iVZ). We have GDZ^ -I, so G{N) D {ZlNZ)^ ■ I. We have det(pE(GalQ)) = , 

so det(G(A^)) = {fLjNZY. 

It remains to show that condition (d) holds. Since S/Q is non-GM and / 9 s^Ar(GalQ) is a subgroup 
of G{N), we have yG{N)iQ) / 0 by Proposition 3.2. In particular, / 0- Proposition 3.5 

implies that G contains an element that is conjugate in GL 2 (Z/A^Z) to ( q ) or ( q ). □ 

The following lemma shows that Gn is determined by G{N). 

Lemma 4.4. The group Gm is the inverse image of G{N) under the reduction modulo N map 
GL2 {Zn) GL 2 (Z/iVZ). 

Proof. Take any A E GL 2 (Z 7 v) satisfying A = I (mod N)] we need only verify that A is an element 
of Gm- Our integer N has the property that (l + A^o^w)^ = I + A^Zat. Since det(A) = I (mod N), 
we have det(A) = for some A G I -|- NqZm- Dehne B := A“^^; it is an element of SL 2 (ZAr) 
that is congruent to I modulo A^o- Using (4.2), we deduce that B is an element of Gm- From the 
definition of G, it is clear that Gm contains the scalar matrix XI. Therefore, A = XI - B is an 
element of Gm- D 

The following group theoretical lemma will be proved in §4.4. 

Lemma 4.5. We have 

[SL 2 (Z^) : G'] = [SL 2 (Z^) : G'J = [SL 2 (Z^) : G'm] • 2 /gcd( 2 , A^). 

Moreover, G' = G'^ x 

The following lemma motivates our definition of J^. 

Lemma 4.6. If XQ(^M)iQ) is infinite, then [GL 2 (Z) : /?£;(GalQ)] is an element of . 

Proof. By Lemma 4.5 and (4.1), we have [GL 2 (Z) : ^^(GalQ)] = [SL 2 (ZAr) : G'Y - 2/gcd(2, A^). 

The group G{N) satisfies conditions (a), (b), (c) and (d) of Definition 4.1 with T = Pg by 
Lemma 4.4. The group G{N) satisfies (e) by assumption. Using Lemma 4.4, we deduce that 
[SL 2 (ZAr) : G'Y - 2/ gcd(2, N) is an element of J^{Te)- 

To complete the proof of the lemma, we need to show that T e has genus 0 or 1 since then 
e) U J^. The genus of P^; is equal to the genus of Xq(^m) by Proposition 3.7. Since Xq(^m) bas 
infinitely many rational point, it must have genus 0 or 1 by Faltings’ theorem. □ 
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4.2. Exceptional rational points on modular curves. Let S be the set of pairs {N, G) with 
> 1 an integer not divisible by any prime £ > 13 and with G a subgroup of GL 2 (Z/A^Z) satisfying 
the following conditions: 

• det(G) = {T.INT.Y and -1 e G, 

• Xq has genus at least 2 or Xg(Q) is finite. 

Dehne the set 

J ■.= U 7rG(lG(Q)). 
iN,G)es 

We will prove that is finite. We will need the following lemma. 

Lemma 4.7. Fix an integer m>2. An open subgroup H o/GL 2 (Zm) has only a finite number of 
closed maximal subgroups and they are all open. 

Proof. The lemma follows from the proposition in [Ser97, §10.6] which gives a condition for the 
Frattini subgroup of H to be open; note that H contains a normal subgroup of the form I + 
m®M 2 (Zm) for some e > 1 and that I + m^M2{1^m) is the product of pro-.^ groups with .^jm. □ 

Proposition 4.8. The set J is finite. 

Proof. Fix pairs {N, G), {N', G') G S such that is a divisor of N' and such that reduction modulo 
N gives a well-defined map G' —)• G. This gives rise to a morphism ip: Yqi —>■ Yq of curves over Q 
such that ttg ° T = t^g'- particular, ttgK^gKQ)) ^ '^G(hG'(Q))- Therefore, 

J= U 7rG(TG(Q)), 

{N,G)£S' 

where S' is the set of pairs {N, G) G 5 for which there is no pair {N', G') G 5 — {(A^, G)} with N' a 
divisor of N so that the reduction modulo N dehnes a map G ^ G' . For each pair (A^, G) G 5^, the 
set yG(Q), and hence also 7rG(TG(Q))) is finite. The finiteness is immediate from the definition of 
S when Yq has genus 0 or 1. If Yq has genus at least 2, then Tg(Q) is finite by Faltings’ theorem. 
So to prove that ff is finite, it suffices to show that S' is finite. 

For each pair {N,G) G S', let G be the open subgroup of GL 2 (Zm) that is the inverse image of 
G under the reduction map GL 2 (Zm) —^ GL 2 (Z/A^Z). Note that we can recover the pair {N,G) 
from G; N > 1 is the smallest integer such that G contains {A G GL 2 (Zm) '. A = I (mod A^)} and 
G is the image of G in GL 2 (Z/AiZ). Define the set 

:= {G:{N,G)gS'}. 

We have \Q\ = |5'|, so it suffices to show that the set Q is finite. 

Suppose that Q is infinite. We now recursively define a sequence {Mj}j>o of open subgroups of 
GL 2 (Zm) such that 

(4.3) Mo D Ml D M 2 D Ms 2 ... 

and such that each Mj has infinitely many subgroups in Q. Set Mq := GL 2 (Zm)- Take an i > 0 for 
which Mj has been dehned and has infinitely many subgroups in Q. Since Mj has only finite many 
open maximal subgroups by Lemma 4.7, one of the them contains infinitely many subgroups in Q] 
denote such a maximal subgroup by Mj+i. 

Take any i > 0. Since there are elements of Q that are proper subgroups of Mi, we deduce 
that Mj D G for some pair {N,G) G S'. The group G = G{N) is thus a proper subgroup of 
Mj(Ai) C GL 2 (Z/AfZ). We have det(Mj(W)) = {TLjNTLY and -I G MfiN) since G has these 
properties. We have (N, Mi(N)) ^ S since otherwise {N,G) would not be an element of S'. 
Therefore, the modular curve has genus 0 or 1. By Proposition 3.7, the congruence subgroup 

11 


Fj := rjv^.( 7 v) (which consists of A G SL 2 (Z) with A modulo N in Mi{N)) has genus 0 or 1. We 
have 

[SL 2 (Z) : Ti] = [SL 2 (Z/iVZ) : Mi(iV) n SL 2 (Z/iVZ)] = [GL 2 (Z/iVZ) : Mi{N)] = [GL 2 (Z^) : Mi], 

so [SL 2 (Z) : Fj] —)• oo as z —)• oo by the proper inclusions (4.3). In particular, there are infinitely 
many congruence subgroup of genus 0 or 1. However, there are only finitely many congruence 
subgroups of SL 2 (Z) of genus 0 and 1; moreover, the level of such congruence subgroups is at most 
52 by [CP03]. This contradiction implies that Q, and hence S', is finite. □ 

For each prime i, let be the set of j-invariants of elliptic curves E/Q for which pE/ is not 
surjective. 

Proposition 4.9. The set Ji is finite for all primes i > 13. 

Proof. Fix a prime i > 13. By Proposition 3.2, it suffices to show that Xg'(Q) is finite for each of 
the maximal subgroups G of GL 2 (Z/ffi) that satisfy det(G) = . Fix such a group G and 

let F = Fg be the congruence subgroup consisting of H G SL 2 (Z) for which A modulo N lies in G. 
The curve Xq has the same genus as F by Proposition 3.7. If F has genus at least 2, then Xg(Q) 
is hnite by Faltings’ theorem. 

We may thus suppose that F has genus 0 or 1. From the description of congruence subgroups 
of genus 0 and 1 in [GP03], we find that I G {17,19} and that F modulo i contains an element of 
order i. Therefore, after replacing G by a conjugate in GL 2 (Z/£Z), we may assume that G is the 
subgroup of upper-triangular matrices. So we are left to consider the modular curve := Xq 

with I G {17,19}. The curve Xq^T), with (. G {17,19}, indeed has finitely many points (it has a 
rational cusp, so it is an elliptic curve of conductor i G {17,19}; all such elliptic curves have rank 
0 ). □ 

4.3. Proof of Theorem 4.2. Let J and (with I > 13) be the sets from §4.2. Define the set 

J :=J'J U Ji] 

13<l<c 

it is finite by Propositions 4.8 and 4.9. 

Take any elliptic curve E/Q with Je ^ J for which pE^e is surjective for all £ > c. Since Je ^ Je 
for 13 < .^ < c, the representation pE^e is surjective for all £ > 13. 

Let F^ be the congruence subgroup from §4.1; denote its level by A^o and define N as in the 
beginning of the section. Let G{N) be the subgroup of GL 2 (Z/A^Z) from §4.1 associated to E/Q. 

Lemma 4.10. The set AiG(' 7 v)(Q) infinite. 

Proof. The integer N is not divisible by any prime £ > 1?> since pE,i is surjective for all £ > 13. 
If {N,G{N)) G S, then je G '^g(n)0^g{n){^)) E J (T J. Since je ^ J by assumption, we have 
{N,G{N)) i S. We have det(G(iV)) = fiLjX'LY and -/ G GfiN), so {N,G{N)) i S implies that 
Xg[n) has genus 0 or 1, and that AiG(Af)(Q) is infinite. □ 

Lemmas 4.6 and 4.10 together imply that [GL 2 (Z) : /?£;(GalQ)] is an element of ^. 

4.4. Proof of Lemma 4.5. Let d be the product of primes that divide m but not N; it divides 
2 • 3 • 5. Since Gm Fl SL2(Zm) contains {A G SL2(Zm) : A = I (mod A^o)}; we have 

G™nSL2(Z^) = lTxSL2(Zrf). 

for a subgroup W of SL 2 (Z^r) containing {A G SL 2 (Z 7 v) '. A = I (mod A^o)}- Since Gm H SL 2 (Zm) 
is a normal subgroup of Gm, the group W is normal in Gn. We have Gd = GL 2 (Zd), since 
Gd D SL 2 (Zrf) and det(Gd) = Z^ (note that det(/?£;(GalQ)) = Z^). 
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Now consider the quotient map 

ip\ G]\f X Gd —)■ Gn jW X Gd/ Sh2(^d)- 

We can view Gm as an open subgroup of Gat x Gd'-, it projects surjectively on both of the factors. 
The group Gm contains W x SL 2 (Zrf), so there is an open subgroup Y of Gn jW x Gd/ SL 2 (Zrf) for 
which Gm = 

Take any matrices i?i,i ?2 & Gd = GL 2 {Zd) with det(i?i) = det(i? 2 ); equivalently, with the 
same image in Gd/ Slj 2 {^d)- There is a matrix A G Gn such that {A, Bi) G Gm and hence also 
{A,B 2 ) G Gm since ip{A,Bi) = Lp{A,B 2 )- Therefore, the commutator subgroup G'm contains the 
element 

(A,5i) • {A,B2) • {A,Bi)-^ • {A,B2)-^ = (/,SiS2Sf 1^2-1). 

By Lemma 4.11 (iv) below, the group GL 2 (Zrf)' is topologically generated by the set 
{BiB 2 B-^B-^ : Si,S 2 G GL 2 (Zrf), det(Si) = det(S 2 )}, 

and hence G'm 3 {L} x GL 2 (Zrf)'. We have an inclusion G'm Y G'j-^ x G'^ = G'j^ x GL 2 (Zrf)' and the 
projections of G'm onto the hrst and second factors are both surjective; since Gm 2 {.f} x GL 2 (Zrf)' 
we find that 

(4.4) G'm = G'nX GL 2 (Zrf)'. 

Lemma 4.11. 

(i) Fori > 5, we have SL 2 (Z£)' = SL 2 (Z£). 

(ii) Fori = 2or3,letb = 4: or 3, respectively. Then reduction modulo h induces an isomorphism 

SL 2 (Z^)/SL 2 (Z£)' ^ SL 2 (Z/ 6 Z)/SL 2 (Z/ 6 Z)' 
of cyclic groups of order b. 

(hi) We have GL 2 (Z 3 )' = SL 2 (Z 3 ) and [SL 2 (Z 2 ) : GL 2 (Z 2 )'] = 2. 

(iv) For each positive integer d, the group GL 2 (Zrf)' is topologically generated by the set 

{ABA-^B-^ :A,B£ GL 2 (Zrf), det(^) = det(S)}. 

Proof. For part (i) and (ii), see [ZywlO, Lemma A.l]. To verify (hi), it suffices by (ii) to show that 
GL 2 (Z/ 3 Z)' = SL 2 (Z/ 3 Z) and [SL 2 (Z/ 4 Z) : GL 2 (Z/ 4 Z)'] = 2 ; this is an easy computation. 

Finally consider (iv). Without loss of generality, we may assume that d is a prime, say i. The 
topological group generated by the set C = {ABA~^B~^ : A, B ^ GL 2 (Z^), det(A) = det(S)} 
contains SL 2 (Z£)', so it suffices to show that the image of C generates GL 2 (Z£)'/ SL 2 (Z£)'. If ^ > 5, 
this is trivial since GL 2 (Z^)' and SL 2 (Z£)' both equal SL 2 (Z£) by (i). For £ = 2 or 3, it suffices by 
part (ii) to show that GL 2 (Z/ 6 Z)' is generated by ABA~^B~^ with matrices A,B£ GL 2 (Z/ 6 Z) 
having the same determinant; this again is an easy calculation. □ 

Before computing G', we first state Goursat’s lemma; we will give a more general version than 
needed so that it can be cited in future work. 

Lemma 4.12 (Goursat’s Lemma). Let Bi,. - -, B^ be profinite groups. Assume that for distinct 
^ Y i^j < n, the groups Bi and Bj have no finite simple groups as common quotients. Suppose that 
H is a closed subgroup of 0^=1 satisfies Pj{H) = Bj for all j where pj: W//=i Bi — )■ Bj is 

the projection map. Then H = 

Proof. We proceed by induction on n. The case n = 1 is trivial, so assume that n = 2. The kernel of 
Pi\h is a closed subgroup of H of the form {/} x N 2 , and similarly the kernel of P 2 \h is of the form 
A^i X {/}. The group = W x A ^2 is a closed normal subgroup of H. Since pi\h is surjective, we 
find that Ni = pi{N) is a closed normal subgroup of Bi] this gives an isomorphism F[/N = 
of profinite groups. Similarly, we have Fl/N = B 2 /N 2 and thus Bi/Ni and B 2 /N 2 are isomorphism. 
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Since we have assumed that Bi and B 2 have no common finite simple quotients, we deduce that 
Bi = A^i and B 2 = N 2 . This proves the n = 2 case since H contains Ni x N 2 = Bi x B 2 . 

Now hx an n > 3 and assume that the n — 1 case of the lemma has been proved. Then the image 
H oi H'm. C \= Bi is a closed subgroup such that the projection H ^ B^ is surjective for all 

1 < i < n — 1. By our inductive hypothesis, we have H = C. So // is a closed subgroup of C x Bn 
and the projections H ^ C and H —)■ Bn are surjective. By the n = 2 case, it suffices to show 
any finite simple quotient of C is not a quotient of Bn- Take any open normal subgroup 17 of C 
such that C/U is a finite simple group. There is an integer 1 < j < n — 1 for which the projection 
U —>■ Bj is not surjective (if not, then we could use our inductive hypothesis to show that U = C). 
For simplicity, suppose j = 1; then U is of the form Ni x B 2 x ■ ■ ■ x Bn-i where Ni is an open 
normal subgroup of Bi- Since C/U = Bi/Ni, we deduce from the hypothesis on the Bi that C/U 
is not a quotient of Bn- □ 

We claim that G'^ = SL 2 (Z£) for every prime m. We have the easy inclusions C GL 2 (Z£)' C 
SL 2 (Zf). By [Ser89, IV Lemma 3] and £> 5 (since 71 m), we have = SL 2 (Z£) if and only if the im¬ 
age of G'l in SL 2 {'Z,/i'Z,) is SL2(Z/7Z). It thus suffices to show that /9E,£(GalQ)' = SL 2 (Z/^Z). Since 
£ \ m, we have pE/{GaliQ) = GL2(Z/7Z) and hence pE/iGalq)' = SL2(Z/7Z) by Lemma 4.11(i); 
this proves our claim. 

We can view G' as a subgroup of x Hqm SL 2 (Z£). The projection of G' to the the factors 
G'jn and SL 2 (Z£) = with £ \ m are all surjective. 

Fix a prime £> 5. The simple group PSL 2 (F£) is a quotient of SL 2 (Z£). Since Ggroups are 
solvable and SL 2 (Z£)' = SL 2 (Z£) by Lemma 4.11(i), we find that PSL 2 (F^) is the only simple group 
that is a quotient of SL 2 {Zi). Note that the groups PSL 2 (F^) are non-isomorphic for different £] in 
fact, they have different cardinalities. 

Take any prime £ \ m, and hence £ > 5- We claim that the simple group PSL 2 (F£) is not 
isomorphic to a quotient of G(„. Indeed, any closed subgroup H of GL 2 (Zm) has no quotients 
isomorphic to PSL 2 (F^) with £ > £> and £ \ m (this follows from the calculation of the groups 
Occ(GL 2 (Z£)) in [Ser98, IV-25]). We can now apply Goursat’s lemma (Lemma 4.12) to deduce 
that 

G' = G'n,xWsU{^e)- 

l\m 

Therefore, [SL 2 (Z) : G'] = [SL 2 (Zm) : G(„]. By (4.4), we have 

[SL2(Z^) : G'J = [SL2 (Zjv) : G'^] • [^U{^d) ■ GL2(Zrf)']. 

By Lemma 4.11, [SL 2 (Zrf) : GL 2 (Zrf)'] = ])([^|^[SL 2 (Z£) : GL 2 (Z£)'] is equal to 1 if d is odd and 2 
if d is even. Since N and d have opposite parities, we conclude that [SL 2 (Zm) : G(„] is equal to 
[SL 2 (Z 7 v) : G'jyf] if N is even and [SL 2 (Z 7 v) : G'j^] • 2 if V is odd. The lemma is now immediate. 

5 . Index computations 


In §1.1, we defined the set 

f 2,4,6,8,10,12,16, 20, 24, 30,32, 36,40,48, 54, 60, 72, 84, 96,108,112,120,144, ) 

~ \ 192,220,240, 288,336, 360,384,504,576,768, 864,1152,1200,1296,1536 / ' 

In §4, we defined the set of integers 

where F runs over the congruence subgroups of SL 2 (Z) of genus 0 or 1. The goal of this section is 
to outline the computations needed to verify the following. 
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Proposition 5.1. We have J' = X. 

The computations in this section were performed with Magma [BCP97]; code for the computations 
can be found at 

http://www.math.Cornell.edu/~zywina/papers/PossibleIndices/ 

Let Sq and Si be sets of representatives of the congruence subgroups of SL 2 (Z) containing —I, 
up to conjugacy in GL 2 (Z), with genus 0 and 1, respectively. Set S := Sq U Si. Since the set J^{T) 
does not change if we replace T by ±r or by a conjugate subgroup in GL 2 (Z), we have 

Cummin and Pauli [CP03] have classified the congruence subgroups of PSL 2 (Z) with genus 0 or 
1, up to conjugacy in PGL 2 (Z). We thus have a classification of the congruence subgroups P of 
SL 2 (Z), up to conjugacy in GL 2 (Z), of genus 0 or 1 that contain —I. Moreover, they have made 
available an explicit list^ of such congruence subgroups; each congruence subgroup is given by a 
level N and set of generators of its image in SL 2 (Z/A^Z)/{±J}. In our computations, we will let 
So and Si consist of congruence subgroups from the explicit list of Cummin and Pauli. 

5.1. Computing indices. Fix a congruence subgroup P of SL 2 (Z) that contains —I and has level 
A'^o- Let N be the integer Nq, ANq or 2Nq when V 2 {Nq) is 0, 1 or at least 2, respectively. For 
simplicity, we will assume that > 1. 

We first explain how we computed the subgroups G{N) of GL 2 (Z/A^Z) that satisfy conditions 
(a), (b) and (c) of Definition 4.1. Instead of directly looking for subgroups in GL 2 (Z/A^Z), we will 
search for certain abelian subgroups in a smaller group. 

Let H be the the image of TF = F in SL 2 (Z/A^Z). Define the subgroup H := {’L/N’L)^ ■ H of 
GL 2 (Z/A^Z). We may assume that H = H Ci SL 2 (Z/A^Z); otherwise, conditions (a) and (b) are 
incompatible. 

Let Af be the normalizer of H (equivalently, of H) in GL 2 (Z/A^Z) and set C := M/H. Since 
det{H) = ((Z/A^Z)^)^, the determinant induces a homomorphism 

det: C ^ {ZlNZ)^l{{ZlNZ)^f =: Qn- 

Lemma 5.2. The subgroups G{N) o/GL 2 (Z/A^Z) that satisfy conditions (a), (b) and (c) of Defini¬ 
tion 4-1 CLre precisely the groups obtained by taking the inverse image under M C of the subgroups 
W of C for which the determinant induces an isomorphism W —> Qn- 

Proof. Let B := G{N) be a subgroup of GL 2 (Z/AiZ) that satisfies conditions (a), (b) and (c). The 
group B contains H by (a) and (b). For any matrix A £ B with det(^) a square, there is a scalar 
A G (Z/A^Z)^ such that det(A^) = 1. Since BnSL 2 (Z/A^Z) = LI by (a), we deduce that H consists 
precisely of the element of B with square determinant. The determinant thus gives rise to an exact 
sequence 

(5.1) I^H^B^Qn^I. 

Therefore, LL is a normal subgroup of B, and hence B C AL, and the determinant map induces an 
isomorphism B/H ^ Qn- Let W be the image of the natural injection B/H ^ M/H = C; it 
satisfies the conditions for W in the statement of the lemma. 

Now take any subgroup W ol C for which the determinant gives an isomorphism W —)• Qn- 
Let B be the inverse image of W under the map M ^ C. The short exact sequence (5.1) holds. 
Therefore, B n SL 2 (Z/ALZ) is equal to H n SL 2 {Z/NZ) = H. We have B D {Z/NZ)^ - I since 

^See http://www.uncg.edu/mat/faculty/pauli/congruence/congruence.html 
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B ^ H. So det(i?) 3 ((Z/A^Z)^)^; with det{B/H) = Qn, this implies that det(i3) = (Z/A^Z)^. 
We have verified that G{N) := B satisfies conditions (a), (b) and (c). □ 

We hrst compute the subgroups W of C for which the determinant map M/H —)• Qjy gives 
an isomorphism W —> Qn- By Lemma 5.2, the subgroups G{N) of GL 2 (Z/A^Z) that satisfy the 
conditions (a), (b) and (c) of Definition 4.1 are precisely the inverse images of the groups W under 
the quotient map AA —)• C. We can then check condition (d) for each of the groups G{N). 

Now fix one of the finite number of groups G{N) that satisfies conditions (a), (b), (c) and (d) 
of Definition 4.1. Let G be the inverse image of G{N) under the reduction map GL 2 {^n) 
GL 2 (Z/A^Z). As usual, for an integer M dividing some power of N, we let G{M) be the image of 
G in GL 2 (Z/MZ); note that G{N) agrees with the previous notation. 

We shall now describe how to compute the index [SL 2 (Zjv) : G']] this is needed in order to 
compute We remark that G'{M) = G{M)'. 

Lemma 5.3. The group G' contains {A £ SL 2 (ZAr) : A = I (mod A^^)}. In particular, we have 
[SL2(Z^) : G'] = [SL2(Z/A^2^) : G{N‘^y]. 

Proof. Since G D I + NM 2 {T,n)i h suffices to prove that (/ + A^M 2 (Zjv))^ = SL 2 (ZAr) n (7 + 
N‘^M2{T,n))- It suffices to prove that (7 + qM2{T,q))' = SL2(Zq) n (7 + g^M2(Zq)) for any prime 
power (? > 1; this is Lemma 1 of [LT76, p.l63]. □ 

Lemma 5.3 allows us to compute [SL 2 (Zjv) : G'] by computing the finite group G{N‘^y. In 
practice, we will use the following to reduce the computation to finding G{My for some, possibly 
smaller, divisor M of N'^. 

Lemma 5.4. Let r he the product of the primes dividing N. Let M > I be an integer having 
the same prime divisors as N. If G{rMy contains {A E SL 2 (Z/rMZ) : A = I (mod M)}, then 
[SL2(Z^) : G'] = [SL2(Z/MZ) : G(M)']. 

Proof. For each positive integer m, define the group Sm ■= {A G SL 2 (Zm) : A = I (mod m)}. 

Let 77 be a closed subgroup of SL 2 (Z 7 v) whose image in SL 2 (Z/rMZ) contains {A G SL 2 (Z/rMZ) : 
A = I (mod M)}. We claim that 77 D Sm\ the lemma will follow from the claim with H = G'. 
By replacing 77 with 77 n Sm, we may assume that 77 is a closed subgroup of Sm- Since Sm is a 
product of the pro-7 groups S^vf^(M) with 7|M, we may further assume that M is a power of a prime 
7 and hence r = 7. 

So fix a prime power 7^^ > 1 and let 77 be a closed subgroup of Sie for which 77(7'^'*'^) = {A G 
SL2(Z/7®'''^Z) : A = I (mod 7®)}; we need to prove that 77 = 5^e. 

For each integer i > 1, define Hi := H D (7-|-7*M2(Z^)) and fjj := 77j/77j+i. For any A G M 2 {Tji) 
with 7 + PA G SL 2 (Z£), we have tr(A) = 0 (mod 7). The map Hi —)• M 2 (Z£), 7 -|- PA i—)• A thus 
induces a homomorphism 

<Pi:^i^ 5[2(F£), 

where s[ 2 (F£) is the subgroup of trace 0 matrices in M 2 (¥(). Using that 77 is closed, we deduce 
that 77 = Si<, if and only if ^pi is surjective for all i > e. 

We now show that pi is surjective for all i > e. We proceed by induction on i; the homomorphism 
Pe is surjective by our initial assumption on 77. Now suppose that pi is surjective for a fixed i > e. 
Take any matrix B in the set B := {(oo))(io); (-i -i)}- The matrix I -i-PB has determinant 1, 
so the surjectivity of pi implies that there is a matrix A G M 2 (Z£) with A = B (mod 7) such that 
h ■.= I + PA is an element of 77. 
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Working modulo we find that = 0, where the last equality uses 

that = 0. In particular, (£^A)^ = 0 (mod Therefore, 

h^ = I+ {l)tA = 1 + e+^A = 1 + e+^B (mod 

Since G H, we find that B modulo £ lies in the image of tpi+i. Since sl 2 (lF£) is generated by the 
B £ 3, we deduce that ifi+i is surjective. □ 

5.2. Genus 0 computations. In this section, we compute the set of integers 

Instead of computing J^(r), we will compute two related quantities. Let J^'{T) be the set of 
integers as in Definition 4.1 but with condition (e) excluded. Let ^"{T) be the set of integers as in 
Definition 4.1 with condition (e) excluded and satisfying the additional condition that 
is empty for at most one prime p\N. 

Lemma 5.5. For a congruence subgroup T of genus 0, we have ^"(F) C ^(F) C ^'(F). 

Proof. The inclusion ^(F) C J^'(F) is obvious. So assume that G{N) is any group satisfying 
conditions (a)-(d) of Definition 4.1 and that is empty for at most one prime p\N. To 

prove the inclusion .^"(T) C ^(F), we need to verify that X := has infinitely many Q- 

points. Note that the curve Xq is smooth and projective; it has genus 0 by our assumption on T 
and Proposition 3.7. 

We claim that X(Q^) is non-empty for all places v of Q; the places corresponds to the primes p 
or to oo, where Qcxd = K- Condition (d) and Proposition 3.5 imply that X(M) is non-empty. Now 
take any prime p \ N. As an Z[l/iV]-scheme X has good reduction at p and hence the fiber X 
over Fp is a smooth and projective curve of genus 0. Therefore, vT(Fp) is non-empty and any of 
the points can be lifted by Hensel’s lemma to a point in A(Qp). By our hypothesis on the sets 
X^^N){Qp) with p\N, we deduce that there is at most one prime po such that A"(Qpg) is empty. 

So suppose that there is precisely one prime po for which A(Qp(j) is empty. The curve Xq has a 
model given by a conic of the form -|- by^ — = 0 with a,b £ . The Hilbert symbol (a, 6)^, 

for a place v, is equal to -|-1 if A"(Q^) / 0 and —1 otherwise. Therefore, = (®) ^)po = 

However, we have 1 by reciprocity. This contradiction proves our claim that A"(Q^) is 

non-empty for all places u of Q. 

The curve Aq has genus 0 so it satisfies the Hasse principle, and hence has a Q-rational point. 
The curve Xq is thus isomorphic to Pq and has infinitely many Q-points. □ 

We shall use the explicit set Sq due to Cummin and Pauli. For each T G 5o, it is straightforward 
to compute the set y{F) using the method in §5.1. 

Using Lemma 3.4 and the discussion in §5.1, we can also compute ^"{F). Fix a prime p di¬ 
viding N. Take e so that p® || N and set M = N/p^. The image of the character XN- GuIq^ —)• 
{fLjN'lF)'^ = ifLjp^TlF)^ X (Z/MZ)^ arising from the Galois action on the A-th roots of unity is 

{'Ljp^'LY X (P)- 

Our Magma computations show that Ure^o ~ and UreSo = ^O) where 

_ f 2,4,6,8,10,12,16, 20, 24,30, 32, 36,40,48, 54, 60, 72,84, 96,108,112,120,144, 

° ■“ \ 192,288,336, 384, 576, 768,864,1152,1200,1296,1536 

Using the inclusions of Lemma 5.5, we deduce that = Xq. 

Remark 5.6. From our genus 0 computations, we find that Sq has cardinality 121 which led to 331 
total groups G{N) that satisfied (a)-(d) with respect to some F G S’q. 
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5.3. Genus 1 computations. Now define the set of integers 

where Xq is the set from §5.2. 

Instead of computing J^(r), we will compute a related quantity. We define to be the set 

of integers as in Definition 4.1 with condition (e) excluded and satisfying the additional condition 
that the Mordell-Weil group of the Jacobian J of the curve ^G(Af) over Q has positive rank. For a 
congruence subgroup F of genus 1 , we have an inclusion ^iV) since a genus 1 curve over 

Q that has a Q-point is isomorphic to its Jacobian. Therefore, 

(j^"'(F)-Xo). 

We now explain how to compute — Xq for a fixed congruence subgroup F of genus 1. As 

described in §5.1, we can compute the subgroups G{N) satisfying the conditions (a)”(d). For each 
group G{N), it is described in §5.1 how to compute [SL 2 (XAr) : G'], where G is the inverse image 
of G{N) under the reduction map GL 2 (ZAr) —)• GL 2 (Z/A 1 Z). We may assume that [SL 2 {'Zi]y) : 
G'] ■ 2/ gcd(2, N) ^ Xq since otherwise it does not contribute to — Xq. 

Let J be the Jacobian of the curve -AG(iV) over Q; it is an elliptic curve since F has genus 1. 
Let us now explain how to compute the rank of X(Q) (and hence finish our method for computing 
—Xq) without having to compute a model for Xq- Moreover, we shall determine the elliptic 
curve J up to isogeny (defined over Q); note that the Mordell rank is an isogeny invariant. 

The curve J has good reduction at all primes p \ N since the Z[l/A^]-scheme AiG(jv) is smooth. 
If i?/Q is an elliptic curve with good reduction at all primes p \ N, then its conductor divides 
A^max := Wp\nP'^^i wiiere 62 = 8, 63 = 5 and Cp = 2 otherwise. One can compute a finite list of 
elliptic curves 

El, ■ ■ ■ ,En 

over Q that represent the isogeny classes of elliptic curves over Q with good reduction aX p \ N. 
In our computations, we will have Amax < 2® • 3® = 62208 and hence the representative curves Ei 
can all be found in Gremona’s database of elliptic curves which are included in Magma (it currently 
contains all elliptic curves over Q with conductor at most 300000). It remains to determine which 
curve Ei is isogenous to J. 

Take any prime p \ N. Using the methods of §3.6, we can compute the cardinality of Xg(jv)(®*'p) 
and hence also the trace of Frobenius 

ap{J) = p+l — |X(Fp)| = p+l — |Ac-(7v)(Fp)|. 

If ap{Ei) 7 ^ ap{J), then Ei and J are not isogenous elliptic curves over Q. By computing ap{J) for 
enough primes p \ N, one can eventually eliminate all but one curve Ei^ which then must be isoge¬ 
nous to J. There are then known methods to determine the Mordell rank of Ei^ and hence also of J. 

Our Magma computations show that 

IJ (J^'"(r) -Xo) = {220,240,360,504}. 

reSi 

In particular, C {220,240,360,504}. 

We now describe how the values 220, 240, 360 and 504 arise in our computations. 

For an odd prime let Mff be the normalizer in GL 2 (Z/£Z) of a non-split Gartan subgroup and 
let be the normalizer in GL 2 (Z/£Z) of a split Gartan subgroup. Define Gi := A/}"}. We 
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can 


identify x A/ 5 ” and A/ 3 ” x A/ 5 *' with subgroups G 2 and G 3 , respectively, of GL2(Z/15Z). We can 
identify A/ 3 ” x J\f^ with a subgroup G 4 of GL 2 (Z/ 21 Z). 

Fix an n G {220,240,360,504}. Let F G Si be any congruence subgroup such that n G «-^(F). 
Let G{N) be one of the groups such that the following hold: 

• it satisfies conditions (a), (b), (c) and (d) of Definition 4.1, 

• the Jacobian J of the curve over Q has positive rank, 

• we have [SL 2 (ZAr) : G'] ■ 2/gcd(2, A^) = n, where G is the inverse image of G{N) under the 
reduction GL 2 (Zjv) ^ 

Our computations show that one of the following hold: 

• We have n = 220, = 11 and G{N) is conjugate in GL 2 (Z/ 11 Z) to Gi. 

• We have n = 240, A^ = 15 and G{N) is conjugate in GL2(Z/15Z) to G 2 . 

• We have n = 360, A^ = 15 and G{N) is conjugate in GL2(Z/15Z) to G 3 . 

• We have n = 504, A^ = 21 and G{N) is conjugate in GL 2 (Z/ 21 Z) to G 4 . 

For later, we note that the index [GL 2 (Z/A^Z) : Gi] is 55, 30, 45 or 63 for i = 1, 2, 3 or 4, 
respectively. 

Lemma 5.7. We have = {220,240,360,504}. 

Proof. We already know the inclusion C {220,240,360,504}. It thus suffices to show that the 
set Xci (Q) is infinite for all 1 < i < 4. So for a fixed i G {1, 2,3,4}, it suffices to show that (Q) 
is non-empty, since it then becomes isomorphic to its Jacobian which we know has infinitely many 
rational points. By Proposition 3.2, it suffices to find a single elliptic curve E/Q with Je ^ {0,1728} 
for which / 9 _E,Af(GalQ) is conjugate to a subgroup of Gi. 

Let E/Q be a CM elliptic curve. Define R := End(F^); it is an order in the imaginary quadratic 
field K := R^zQ- Take any odd prime i that does not divide the discriminant of R. One can show 
that / 3 E^£(GalQ) is contained in the normalizer of a Gartan subgroup G C GL 2 (Z/^Z) isomorphic 
to (R/iR)^, cf. [Ser97, Appendix A.5]. The Gartan group G is split if and only if i splits in K. 

Gonsider the CM curve Ei/Q defined by — llx +14; R is an order in Q{i) of discriminant 

— 16. The primes 3, 7 and 11 are inert in Q{i) and 5 is split in Q{i). Therefore, / 0 £;i,ii(CalQ), 
PEi,i 5 (CalQ) and / 0 £;i, 2 i(CalQ) are conjugate to subgroups of Gi, G 3 and G 4 , respectively. 

Consider the CM curve E 2 /Q defined by + xy = — 2x — Q R is an order in Q{^/—7) 

of discriminant —7. The primes 3 and 5 are inert in Q(\/—7). Therefore, / 0 E 2 ,i 5 (CalQ) is conjugate 
to a subgroup of G 2 . □ 

Remark 5.8. From our genus 1 computations, we find that iSi has cardinality 163 which led to 805 
total groups G{N) that satisfied (a)~(d) with respect to some F G ^i. We needed to determine the 
Jacobian of Xc{n), up to isogeny, for 63 of these groups G{N). 

5.4. Proof of Proposition 5.1. In §5.2, we found that Ure 5 o ~ Lemma 5.7, we 

have 

( U -^0 = U (^(F) - To) = {220,240,360,504}. 

reSi tgSi 

Therefore, is equal to Xq U {220, 240, 360,504} = X. 

6 . Proof of main theorems 

6.1. Proof of Theorem 1.3. The theorem follows immediately from Theorem 4.2 and Proposi¬ 
tion 5.1. 


19 


6.2. Proof of Theorem 1.4. 


Lemma 6.1. Let E/Q be a non-CM elliptic curve and suppose i > 37 is a prime for which pE/ is 
not surjective. Then £ < [GL 2 (Z) : /9£;(GalQ)]. 

Proof. Prom [SerSl, §8.4], we find that /3_B,£(GalQ) is contained in the normalizer of a Cartan 
subgroup of GL 2 (Z/fZ). In particular, we have [GL 2 (Z/fZ) : pE,£(GalQ)] > £{£ — l)/2 > i. 
Therefore, £ < [GUi'L/a) : pE^GalQ)] < [GL 2 (Z) : /9E(GalQ)]. □ 

First suppose that there is a finite set J such that if E/Q is an elliptic curve with Je ^ J, then 
[GL 2 (Z) : pE(GalQ)] £ I. There is thus an integer c > 37 such that for any non-CM E/Q, we have 
[GL 2 (Z) : /3£;(GalQ)] < c, this uses Serre’s theorem (and Lemma 2.3) to deal with the hnite number 
of j-invariants of non-CM curves that are in J. By Lemma 6.1, we deduce that pe,£ is surjective 
for all primes £ > c, this gives Conjecture 1.2. 

Now suppose that Conjecture 1.2 holds for some constant c. Let J be the finite set from Theo¬ 
rem 1.3 with this constant c. After possibly increasing J, we may assume that it contains the finite 
number of j-invariants of CM elliptic curves over Q. Theorem 1.3 then implies that for any elliptic 
curve E/Q with je ^ J, we have [GL 2 (Z) : /9£:(Gal(Q)] G X. 

6.3. Proof of Theorem 1.5. First take any n > 1 so that Jn is infinite. Let E/Q be an elliptic 
curve with Je G Jn, equivalently, with [GL 2 (Z) : /?E(GalQ)] = n. Lemma 6.1 implies that pE,^ is 
surjective for all primes £ > max{37, n}. Let J be the set from Theorem 1.3 with c := max{37, n}. 
Now take any elliptic curve E/Q with je G Jn — J', note that Jn — J is non-empty since Jn is infinite 
and J is finite. The representation pE/ is surjective for all f > c and Je ^ J, so [GL 2 (Z) : yO£;(GalQ)] 
is an element of X by Theorem 1.3. Therefore, n G X. 

Now take any integer n G X. To complete the proof of the theorem, we need to show that Jn 
is infinite. By Proposition 5.1, we have n G J^(F) for some congruence subgroup F of SL 2 (Z) 
of genus 0 or 1. From our computation of J^o in §5.2, we may assume that F has genus 0 when 
n ^ {220,240,360,504}. 

Denote the level of F by Nq. Let N be the integer Nq, 4A^o or 2Nq when V 2 {Nq) is 0, 1 or at least 
2, respectively. The integer N is not divisible by any prime f > 13 (if F has genus 0, this follows 
from the classification of genus 0 congruence subgroups in [CP03]; if F has genus 1, then we saw in 
§5.3 that N G {11,15,21}). 

Since n G J^(F), there is a subgroup G{N) of GL 2 (Z/iVZ) that satishes conditions (a), (b), (c), 
(d) and (e) of Dehnition 4.1 and also satisfies n = [SL 2 (ZAr) : G"^] • 2/ gcd(2. A"), where Gn is the 
inverse image of G{N) under the reduction map GL 2 (Z 7 v) —?• GL 2 (Z/AZ). Let G be the inverse 
image of G{N) under GL 2 (Z) —)• GL 2 (Z/AZ). 

Let m be the product of the primes £ < 13; note that N divides some power of m. Let Gm be 
the image of G under the projection map GL 2 (Z) —)• GL 2 (Zm,). Lemma 4.7 implies that there is a 
positive integer M, dividing some power of m, such that if H is an open subgroup of Gm X GL 2 (Zm), 
then H equals Gm if and only if H{M) equals GmiM) = G{M). 

Take any proper subgroup B C G{M) for which det(B) = (Z/MZ)^ and —I G B. We have a 
morphism ips- Yb ^ ^G(M) = ^G(Af) of curves over Q such that ttb = T^GiN) ° Tb- The morphism 
(fB has degree [G{M) : B] > 1. Define 

1F:=|J(/pb(Yb(Q)), 

B 
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where B varies over the proper subgroups of G{M) for which det{B) = (Z/MZ)^ and —I G B. We 
have W C Yg(n){Q)- 

Lemma 6.2. IfE/Q is a non-CM elliptic curve withjE G '/rc>(Af)(^G(Af)(Q)“^)) then ±pE, uiGalo) 
is conjugate in GL 2 (Z/MZ) to G{M). 

Proof. Fix a non-CM elliptic curve E/Q with Je G ttg(n) (^G(Af) (Q) -W) = (^g{m) (Q) - ^)- 

There is a point P G Fg(Q) — W for which t^g{M){P) = JE- 

With notation as in §3, there is an isomorphism a: E[M] —(Z/MZ)^ such that the pair 
{E, [q;]g) represents P. Since je ^ {0,1728}, the automorphisms of E}^ act on E[N] by I or — 
By Lemma 3.1(ii) and —I G G{M), we have a o o a~^ G G{M) for all a G CalQ. We may 
assume that pe,m was chosen so that pe,m{(^) = a o a o a~^ for all cr G GuIq. Since —I G G{M), 
we deduce that B := ±pE,MiGalq) is a subgroup of G{M). Note that det(B) = (Z/MZ)^ and 
-I eB. 

Snppose that B is a proper snbgronp of G{M). We have a o a~^ o a~^ G B for all cr G Gal^, so 
(E, [ajfi) represents a point P' G Fb(Q) by Lemma 3.1(ii). We have ipB{P') = P, so P G W. This 
contradict that P G hG(Q) — W and hence B = G{M). □ 

Lemma 6.3. If E/Q is an elliptic curve with Je G 'Eg(n)CPg(n){Q) ~ then 

[GL 2 (Z) :p£;(GalQ)] =n 

or pE,i is not surjective for some prime £ > 13. 

Proof. Let E/Q be an elliptic curve with jE G 'EG(N)iPG{N){Q) ~ such that pE,e is surjective 
for all i > 13. We need to show that [GL 2 (Z) : / 9 ^(GalQ)] = n. The curve E is non-CM since pE,e 
is snrjective for i > 13. Define the subgroup 

H := Z^ •/9E(GalQ) 

of GL 2 (Z). By Lemma 6.2, we may assume that EpE,MiGalq) = G{M). Since G{M) contains the 
scalar matrices in GL 2 (Z/MZ), we have H{M) = G{M) and an inclnsion H E G. In particular, 
H' C G'. 

Let mo be the product of the primes i for which .£ < 5 or for which pE/ is not surjective. Let Hm 
and Hmo be the image of H under the projection to GL 2 (Zm) and GL 2 (Zmo)) respectively. The 
integer mo divides m since pE/ is surjective for all i > 13. 

Lemma 4.5 applied with G and m replaced by H and mo, respectively, implies that H' = 
P'mo ^ n^mo SL 2 (Z£). Therefore, we have 

= SL 2 (Z,). 

Since H' EG' GL SL 2 (Z), we deduce that 

G" = G:„xn sl 2 (z,). 

We have Hm E Gm and H{M) = G{M), and thns Hm = Gm by our choice of M. Therefore, 
77^ = G'^ and hence H' = G'. The groups H and / 9 s(GalQ) have the same commutator subgroup, 
so by Proposition 2.1, we have 

[GL 2 (Z) : PE(GalQ)] = [SL 2 (Z): H'] = [SL 2 (Z): G']. 

It remains to show that [SL 2 (Z): G'] = n. We have G = Gn x GL 2 (Z£), so G' = x 
GL 2 (Zf)h By Lemma 4.11, the index [SL 2 (Z£) : GL 2 (Z£)'] is 1 or 2 when 7 7 ^ 2 or 7 = 2, 
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respectively. Therefore, 

[SL 2 (Z) : G'] = [SL 2 (Z^) : G'^] • ll[SL 2 {Ze) : GL 2 (Z,)'] = [SL 2 (Z^) : G^] • 2/gcd(2,iV) = n. □ 

i>iN 

Recall that a subset S of (Q) has density 6 if 

\{PeS : h{P) < x}\/\{P e pHQ) : h{P) < x}| ^ 5 

as x —oo, where h is the height function. If Xc( 7 v) has genus 0, then it is isomorphic to Pq 
( from our assumptions on G{N), the curve ^g( 7 v) has infinitely many Q-points). Choosing such 
an isomorphism = Pq allows us to define the density of a subset of ^G(Af)(Q); the existence 

and value of the density does not depend on the choice of isomorphism. 

Lemma 6.4. There is an infinite subset S of , with positive density if has genus 

0, such that if E/Q is an elliptic curve with Je £ '^g{N){S), then pE,i is surjective for all i > 13. 

Proof. We claim that for any place v of Q, the set XQ(^E)iQ) has no isolated points in XQ(^pf^{Qy), 
i.e., there is no open subset U of -^G(Af)(Qij)) with respect to the u-adic topology, for which U H 
Xg{n){Q) consists of a single point. If has genus 0, then the claim follows since no point 

in P^(Q) is isolated in P^(Q.y). Now consider the case where -^g(w) has genus 1. If one point 
of ^G(Af)(Q) was isolated in Xq(^e){Qv), then using the group law of N'G(Af)(Q) (hy first fixing a 
rational point), we find that every point is isolated. So suppose that for each P S ^g(A'')(Q)) there is 
an open subset Up C Xq(^e){Qv) such that UpriXQ(^E){Q) = {-P}- The sets {Gp}pgj\:( 3 (jv)(Q) along 
with the complement of the closure of ^G(Ar)(Q) ia -^G(Af)(Qi)) form an open cover of ^G(Af)(Qij) 
that has no finite subcover. This contradicts the compactness of ^g(w)(Qi;) and proves the claim. 

Since ttg{N)- Tg( 7 V)(^^) —^ P is continuous, the above claim with v = oo implies that the set 
'^G{N){PG{N)iQ)) is not a subset of Z. Choose a rational number j G '^G{N)(PG{N)iQ.)) that is not 
an integer. 

There is a prime p such that Vp{j) is negative; set e := —Vp{j). Let U be the set of points 
P S TG(Ar)(Qp) for which ttg(n){P) / 0 and Vp{TrQ(^E){P)) = “e; it is an open subset of Yq(^e){Qp)- 
Define S :=U (1 bG( 7 v)(Q) =h( T\ XG(N)iQ)'j it is non-empty by our choice of e (in particular, U is 
non-empty). The set S is infinite since otherwise there would be an isolated point of ^g(A'')(Q) ia 
XG{N)iQp)- If Xg(n) has genus 0, then S clearly has positive density. 

Now take any elliptic curve E/Q with jp G '^G{N)iS) and any prime £ > max{37, e}; it is non-CM 
since its j-invariant is not an integer. We claim that pp/ is surjective. The lemma will follow from 
the claim after using Proposition 4.9 to remove a finite subset from S to ensure the surjectivity of 
Pe^i for 13 < .^ < max{37, e}. 

Suppose that pp^i is not surjective. From Lemmas 16, 17 and 18 in [SerSl], we find that 
Pe, eiGalQ) is contained in the normalize!’ of a Cartan subgroup of CL 2 (Z/^Z). In particular, 
the order of pp/iGalq) is not divisible by £. 

We have Vp{jE) = —e < 0 since jp G 'Eg(n){S). Let E'/Qp be the Tate curve with j-invariant 
jp] see [Ser98, IV Appendix A.l] for details. From the proposition in [Ser98, IV Appendix A.1.5] 
and our assumption £ > e, we find that pEpfiGalq^) contains an element of order £. Since E' and 
E have the same j-invariant, they become isomorphic over some quadratic extension of Qp. Since 
£ is odd, we deduce that p^^£(CalQ) contains an element of order £. This contradicts that the order 
of Pe, eiGalq) is not divisible by £. Therefore, pp^^ is surjective as claimed. □ 

Let W and S be the sets from Lemma 6.3 and Lemma 6.4, respectively. Take any elliptic curve 
E/Q with jp G eg[n){S ~ IT). Lemma 6.4 implies that the representation pp^i is surjective for all 
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i > 13. Lemma 6.3 then implies that [GL 2 (Z) : / 0 £;(GalQ)] = n. Therefore, Jn 2 '^g{n){S — W). So 
to prove that Jn is infinite, it suffices to show that the set S' — IT is infinite. 

First suppose that has genus 0. The set VT is a thin subset of ^G(Af)(Q) — P^(Q) in the 

language of [Ser97, §9.1]; this uses that the union defining IT is finite and that the morphisms (ps 
are dominant with degree at least 2. From [Ser97, §9.7], we find that IT has density 0. Since S has 
positive density, we deduce that S — IT is inhnite. 

Finally suppose that has genus 1. Since S is infinite, it suffices to show that W is finite. 

So take any proper subgroup B of G{M) satisfying det(i?) = and —1 S B. It thus 

suffices to show that the set Xb{Q) is finite. The morphism pB'- Xb ^g(w) is dominant, 

so Xb has genus at least 1 . If Xb has genus greater than 1 , then Xb(Q) is finite by Faltings’ 
theorem. We are left to consider the case where Xb has genus 1. Let Fb be the congruence 
subgroup associated to Xb; it has genus 1. We have Fb T F and hence the level of Fb is divisible 
by Nq. We have [SL 2 (Z) : F] = [GL 2 (Z/MZ) : B] and hence b := [GL 2 (Z/MZ) : G(M)] = 
[GL 2 (Z/XZ) : G(X)] is a proper divisor of [SL 2 (Z) : F]. From the computations in §5.3, we may 
assume that G{N) is equal to one of the groups denoted Gi, G 2 , G 3 or G 4 . In particular, we have 
(Xo, 6 ) G {(11,55), (15,30), (15,45), (21,63)}. From the classification in [GP03], we find that there 
is no genus 1 congruence subgroup of SL 2 (Z) containing —I whose level is divisible by Nq and 
whose index in SL 2 (Z) has 6 as a proper divisor. So the case where Xb has genus 1 does not occur 
and we are done. 
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